[GH-ISSUE #7033] google-chrome: no input possible in searchbar and fields #3457

Closed
opened 2026-05-05 10:00:37 -06:00 by gitea-mirror · 6 comments
Owner

Originally created by @michaelvandewalle-commits on GitHub (Jan 14, 2026).
Original GitHub issue: https://github.com/netblue30/firejail/issues/7033

Description

Formerly working until Linux-mint-cinnamon-22.2 but not anymore after upgrade to 22.3

Steps to Reproduce

Steps to reproduce the behavior

  1. Run in terminal firejail --blacklist=/media/ google-chrome-stable %U
  2. Click on 'New tab'
  3. Type in the searchbar
  4. you can not type there

Expected behavior

Normally you can enter a searchword there.

Actual behavior

you can not enter text in the searchfield

Behavior without a profile

What changed calling LC_ALL=C firejail --noprofile /path/to/program in a
terminal?

This works!

Additional context

Adding --nodbus works

This works: firejail --blacklist=/media/ firefox %U

Environment

  • Name/version/arch of the Linux kernel (uname -srm): Linux 6.8.0-90-generic x86_64
  • Name/version of the Linux distribution (e.g. "Ubuntu 20.04" or "Arch Linux"): Linux-mint-cinnamon-22.3
  • Name/version of the relevant program(s)/package(s) (e.g. "firefox 134.0-1,
    mesa 1:24.3.3-2"): google-chrome-stable 143.0.7499.192
  • Version of Firejail (firejail --version): firejail version 0.9.72
  • If you use a development version of firejail, also the commit from which it
    was compiled (git rev-parse HEAD): none

Checklist

  • I am using firejail 0.9.78 or later
  • I am using the full program path (e.g. firejail /usr/bin/vlc instead of firejail vlc; see https://github.com/netblue30/firejail/issues/2877)
  • The issues is caused by firejail (i.e. running the program by path (e.g. /usr/bin/vlc) "fixes" it).
  • I can reproduce the issue without custom modifications (e.g. globals.local).
  • The program has a profile. (If not, request one in https://github.com/netblue30/firejail/issues/1139)
  • The profile (and redirect profile if exists) hasn't already been fixed upstream.
  • I have performed a short search for similar issues (to avoid opening a duplicate).
    • I'm aware of browser-allow-drm yes/browser-disable-u2f no in firejail.config to allow DRM/U2F in browsers.
  • I used --profile=PROFILENAME to set the right profile. (Only relevant for AppImages)

Log

Output of LC_ALL=C firejail --blacklist=/media/ google-chrome-stable %U

firejail --blacklist=/media/ google-chrome-stable %U
Reading profile /etc/firejail/google-chrome-stable.profile
Reading profile /etc/firejail/google-chrome.profile
Reading profile /etc/firejail/chromium-common.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-exec.inc
Reading profile /etc/firejail/disable-interpreters.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/disable-xdg.inc
Reading profile /etc/firejail/whitelist-common.inc
Reading profile /etc/firejail/whitelist-run-common.inc
Reading profile /etc/firejail/whitelist-runuser-common.inc
Reading profile /etc/firejail/whitelist-usr-share-common.inc
Reading profile /etc/firejail/whitelist-var-common.inc
Warning: networking feature is disabled in Firejail configuration file
Parent pid 34766, child pid 34767
Warning: An abstract unix socket for session D-BUS might still be available. Use --net or remove unix from --protocol set.
Warning: cleaning all supplementary groups
Warning: cleaning all supplementary groups
Warning: cleaning all supplementary groups
Warning: cleaning all supplementary groups
Warning: cleaning all supplementary groups
Child process initialized in 172.64 ms
[6:30:0114/143935.171184:ERROR:dbus/bus.cc:406] Failed to connect to the bus: Failed to connect to socket /run/firejail/mnt/dbus/system: Permission denied
[6:30:0114/143935.441463:ERROR:dbus/bus.cc:406] Failed to connect to the bus: Failed to connect to socket /run/firejail/mnt/dbus/system: Permission denied
[6:30:0114/143935.441500:ERROR:dbus/bus.cc:406] Failed to connect to the bus: Failed to connect to socket /run/firejail/mnt/dbus/system: Permission denied

(google-chrome-stable:6): dbind-WARNING **: 14:39:35.491: Couldn't connect to accessibility bus: Failed to connect to socket /run/user/1000/at-spi/bus_0: No such file or directory
[6:30:0114/143935.545062:ERROR:dbus/bus.cc:406] Failed to connect to the bus: Failed to connect to socket /run/firejail/mnt/dbus/system: Permission denied
[6:30:0114/143935.545463:ERROR:dbus/bus.cc:406] Failed to connect to the bus: Failed to connect to socket /run/firejail/mnt/dbus/system: Permission denied
[6:6:0114/143935.545881:ERROR:dbus/object_proxy.cc:573] Failed to call method: org.freedesktop.systemd1.Manager.StartTransientUnit: object_path= /org/freedesktop/systemd1: org.freedesktop.DBus.Error.InvalidArgs: Process 6 is a kernel thread, refusing.
[6:6:0114/143935.548713:ERROR:dbus/object_proxy.cc:573] Failed to call method: org.freedesktop.DBus.Properties.GetAll: object_path= /org/freedesktop/UPower/devices/DisplayDevice: unknown error type: 

(google-chrome-stable:6): IBUS-WARNING **: 14:39:38.995: Unable to connect to ibus: Could not connect: No such file or directory
[6:6:0114/143939.275037:ERROR:chrome/browser/ui/startup/startup_browser_creator_impl.cc:171] No browser window found for startup.
[6:6:0114/143939.412170:ERROR:chrome/browser/ui/views/user_education/impl/browser_user_education_interface_impl.cc:154] Attempting to show IPH IPH_TabSearch before browser initialization complete; IPH will not be shown.
[6:6:0114/143939.414924:ERROR:chrome/browser/ui/views/user_education/impl/browser_user_education_interface_impl.cc:154] Attempting to show IPH IPH_TabSearch before browser initialization complete; IPH will not be shown.
[6:6:0114/143939.419492:ERROR:chrome/browser/ui/views/user_education/impl/browser_user_education_interface_impl.cc:154] Attempting to show IPH IPH_TabSearch before browser initialization complete; IPH will not be shown.
[6:6:0114/143939.423328:ERROR:chrome/browser/ui/views/user_education/impl/browser_user_education_interface_impl.cc:154] Attempting to show IPH IPH_TabSearch before browser initialization complete; IPH will not be shown.
[6:6:0114/143939.427090:ERROR:chrome/browser/ui/webui/ntp/new_tab_ui.cc:54] Requested load of chrome://newtab/ for incorrect profile type.
[6:6:0114/143939.427109:ERROR:chrome/browser/ui/webui/ntp/new_tab_ui.cc:54] Requested load of chrome://newtab/ for incorrect profile type.
[6:6:0114/143939.427139:ERROR:chrome/browser/ui/webui/ntp/new_tab_ui.cc:54] Requested load of chrome://newtab/ for incorrect profile type.
[6:6:0114/143939.436152:ERROR:chrome/browser/ui/webui/ntp/new_tab_ui.cc:54] Requested load of chrome://newtab/ for incorrect profile type.
[6:6:0114/143939.436164:ERROR:chrome/browser/ui/webui/ntp/new_tab_ui.cc:54] Requested load of chrome://newtab/ for incorrect profile type.
Created TensorFlow Lite XNNPACK delegate for CPU.
[6:6:0114/143939.544345:ERROR:chrome/browser/ui/webui/ntp/new_tab_ui.cc:54] Requested load of chrome://newtab/ for incorrect profile type.
[6:6:0114/143939.544369:ERROR:chrome/browser/ui/webui/ntp/new_tab_ui.cc:54] Requested load of chrome://newtab/ for incorrect profile type.
[6:6:0114/143939.544372:ERROR:chrome/browser/ui/webui/ntp/new_tab_ui.cc:54] Requested load of chrome://newtab/ for incorrect profile type.
[6:6:0114/143939.544412:ERROR:chrome/browser/ui/webui/ntp/new_tab_ui.cc:54] Requested load of chrome://newtab/ for incorrect profile type.
Fontconfig error: Cannot load default config file: File not found
[6:32:0114/143939.635778:ERROR:google_apis/gcm/engine/registration_request.cc:292] Registration response error message: DEPRECATED_ENDPOINT
[6:6:0114/143957.267629:ERROR:ui/gfx/x/atom_cache.cc:232] Add chromium/from-privileged to kAtomsToCache
[6:32:0114/144008.498889:ERROR:google_apis/gcm/engine/registration_request.cc:292] Registration response error message: QUOTA_EXCEEDED

Output of LC_ALL=C firejail --debug --blacklist=/media/ google-chrome-stable %U

debug-GCHR.txt

Originally created by @michaelvandewalle-commits on GitHub (Jan 14, 2026). Original GitHub issue: https://github.com/netblue30/firejail/issues/7033 <!-- See the following links for help with formatting: https://guides.github.com/features/mastering-markdown/ https://docs.github.com/en/github/writing-on-github/getting-started-with-writing-and-formatting-on-github/basic-writing-and-formatting-syntax --> ### Description Formerly working until Linux-mint-cinnamon-22.2 but not anymore after upgrade to 22.3 ### Steps to Reproduce _Steps to reproduce the behavior_ 1. Run in terminal `firejail --blacklist=/media/ google-chrome-stable %U` 2. Click on 'New tab' 3. Type in the searchbar 4. >>> you can not type there ### Expected behavior Normally you can enter a searchword there. ### Actual behavior you can not enter text in the searchfield ### Behavior without a profile _What changed calling `LC_ALL=C firejail --noprofile /path/to/program` in a terminal?_ This works! ### Additional context Adding `--nodbus` works This works: `firejail --blacklist=/media/ firefox %U` ### Environment - Name/version/arch of the Linux kernel (`uname -srm`): Linux 6.8.0-90-generic x86_64 - Name/version of the Linux distribution (e.g. "Ubuntu 20.04" or "Arch Linux"): Linux-mint-cinnamon-22.3 - Name/version of the relevant program(s)/package(s) (e.g. "firefox 134.0-1, mesa 1:24.3.3-2"): google-chrome-stable 143.0.7499.192 - Version of Firejail (`firejail --version`): firejail version 0.9.72 - If you use a development version of firejail, also the commit from which it was compiled (`git rev-parse HEAD`): none ### Checklist <!-- Note: Items are checked with an "x", like so: - [x] This is a checked item. --> - [ ] I am using firejail [0.9.78 or later](https://github.com/netblue30/firejail/tree/master/SECURITY.md) - [ ] I am using the full program path (e.g. `firejail /usr/bin/vlc` instead of `firejail vlc`; see `https://github.com/netblue30/firejail/issues/2877`) - [ ] The issues is caused by firejail (i.e. running the program by path (e.g. `/usr/bin/vlc`) "fixes" it). - [x] I can reproduce the issue without custom modifications (e.g. globals.local). - [x] The program has a profile. (If not, request one in `https://github.com/netblue30/firejail/issues/1139`) - [ ] The profile (and redirect profile if exists) hasn't already been fixed [upstream](https://github.com/netblue30/firejail/tree/master/etc). - [x] I have performed a short search for similar issues (to avoid opening a duplicate). - [ ] I'm aware of `browser-allow-drm yes`/`browser-disable-u2f no` in `firejail.config` to allow DRM/U2F in browsers. - [ ] I used `--profile=PROFILENAME` to set the right profile. (Only relevant for AppImages) ### Log <details> <summary>Output of <code>LC_ALL=C firejail --blacklist=/media/ google-chrome-stable %U</code></summary> <p> ``` firejail --blacklist=/media/ google-chrome-stable %U Reading profile /etc/firejail/google-chrome-stable.profile Reading profile /etc/firejail/google-chrome.profile Reading profile /etc/firejail/chromium-common.profile Reading profile /etc/firejail/disable-common.inc Reading profile /etc/firejail/disable-devel.inc Reading profile /etc/firejail/disable-exec.inc Reading profile /etc/firejail/disable-interpreters.inc Reading profile /etc/firejail/disable-programs.inc Reading profile /etc/firejail/disable-xdg.inc Reading profile /etc/firejail/whitelist-common.inc Reading profile /etc/firejail/whitelist-run-common.inc Reading profile /etc/firejail/whitelist-runuser-common.inc Reading profile /etc/firejail/whitelist-usr-share-common.inc Reading profile /etc/firejail/whitelist-var-common.inc Warning: networking feature is disabled in Firejail configuration file Parent pid 34766, child pid 34767 Warning: An abstract unix socket for session D-BUS might still be available. Use --net or remove unix from --protocol set. Warning: cleaning all supplementary groups Warning: cleaning all supplementary groups Warning: cleaning all supplementary groups Warning: cleaning all supplementary groups Warning: cleaning all supplementary groups Child process initialized in 172.64 ms [6:30:0114/143935.171184:ERROR:dbus/bus.cc:406] Failed to connect to the bus: Failed to connect to socket /run/firejail/mnt/dbus/system: Permission denied [6:30:0114/143935.441463:ERROR:dbus/bus.cc:406] Failed to connect to the bus: Failed to connect to socket /run/firejail/mnt/dbus/system: Permission denied [6:30:0114/143935.441500:ERROR:dbus/bus.cc:406] Failed to connect to the bus: Failed to connect to socket /run/firejail/mnt/dbus/system: Permission denied (google-chrome-stable:6): dbind-WARNING **: 14:39:35.491: Couldn't connect to accessibility bus: Failed to connect to socket /run/user/1000/at-spi/bus_0: No such file or directory [6:30:0114/143935.545062:ERROR:dbus/bus.cc:406] Failed to connect to the bus: Failed to connect to socket /run/firejail/mnt/dbus/system: Permission denied [6:30:0114/143935.545463:ERROR:dbus/bus.cc:406] Failed to connect to the bus: Failed to connect to socket /run/firejail/mnt/dbus/system: Permission denied [6:6:0114/143935.545881:ERROR:dbus/object_proxy.cc:573] Failed to call method: org.freedesktop.systemd1.Manager.StartTransientUnit: object_path= /org/freedesktop/systemd1: org.freedesktop.DBus.Error.InvalidArgs: Process 6 is a kernel thread, refusing. [6:6:0114/143935.548713:ERROR:dbus/object_proxy.cc:573] Failed to call method: org.freedesktop.DBus.Properties.GetAll: object_path= /org/freedesktop/UPower/devices/DisplayDevice: unknown error type: (google-chrome-stable:6): IBUS-WARNING **: 14:39:38.995: Unable to connect to ibus: Could not connect: No such file or directory [6:6:0114/143939.275037:ERROR:chrome/browser/ui/startup/startup_browser_creator_impl.cc:171] No browser window found for startup. [6:6:0114/143939.412170:ERROR:chrome/browser/ui/views/user_education/impl/browser_user_education_interface_impl.cc:154] Attempting to show IPH IPH_TabSearch before browser initialization complete; IPH will not be shown. [6:6:0114/143939.414924:ERROR:chrome/browser/ui/views/user_education/impl/browser_user_education_interface_impl.cc:154] Attempting to show IPH IPH_TabSearch before browser initialization complete; IPH will not be shown. [6:6:0114/143939.419492:ERROR:chrome/browser/ui/views/user_education/impl/browser_user_education_interface_impl.cc:154] Attempting to show IPH IPH_TabSearch before browser initialization complete; IPH will not be shown. [6:6:0114/143939.423328:ERROR:chrome/browser/ui/views/user_education/impl/browser_user_education_interface_impl.cc:154] Attempting to show IPH IPH_TabSearch before browser initialization complete; IPH will not be shown. [6:6:0114/143939.427090:ERROR:chrome/browser/ui/webui/ntp/new_tab_ui.cc:54] Requested load of chrome://newtab/ for incorrect profile type. [6:6:0114/143939.427109:ERROR:chrome/browser/ui/webui/ntp/new_tab_ui.cc:54] Requested load of chrome://newtab/ for incorrect profile type. [6:6:0114/143939.427139:ERROR:chrome/browser/ui/webui/ntp/new_tab_ui.cc:54] Requested load of chrome://newtab/ for incorrect profile type. [6:6:0114/143939.436152:ERROR:chrome/browser/ui/webui/ntp/new_tab_ui.cc:54] Requested load of chrome://newtab/ for incorrect profile type. [6:6:0114/143939.436164:ERROR:chrome/browser/ui/webui/ntp/new_tab_ui.cc:54] Requested load of chrome://newtab/ for incorrect profile type. Created TensorFlow Lite XNNPACK delegate for CPU. [6:6:0114/143939.544345:ERROR:chrome/browser/ui/webui/ntp/new_tab_ui.cc:54] Requested load of chrome://newtab/ for incorrect profile type. [6:6:0114/143939.544369:ERROR:chrome/browser/ui/webui/ntp/new_tab_ui.cc:54] Requested load of chrome://newtab/ for incorrect profile type. [6:6:0114/143939.544372:ERROR:chrome/browser/ui/webui/ntp/new_tab_ui.cc:54] Requested load of chrome://newtab/ for incorrect profile type. [6:6:0114/143939.544412:ERROR:chrome/browser/ui/webui/ntp/new_tab_ui.cc:54] Requested load of chrome://newtab/ for incorrect profile type. Fontconfig error: Cannot load default config file: File not found [6:32:0114/143939.635778:ERROR:google_apis/gcm/engine/registration_request.cc:292] Registration response error message: DEPRECATED_ENDPOINT [6:6:0114/143957.267629:ERROR:ui/gfx/x/atom_cache.cc:232] Add chromium/from-privileged to kAtomsToCache [6:32:0114/144008.498889:ERROR:google_apis/gcm/engine/registration_request.cc:292] Registration response error message: QUOTA_EXCEEDED ``` </p> </details> <details> <summary>Output of <code>LC_ALL=C firejail --debug --blacklist=/media/ google-chrome-stable %U</code></summary> <p> <!-- If the output is too long, save it to a file (e.g. "fjdebug.txt") and attach it to the comment: https://docs.github.com/en/get-started/writing-on-github/working-with-advanced-formatting/attaching-files If that does not work, create a secret gist at https://gist.github.com/ and link it here. --> [debug-GCHR.txt](https://github.com/user-attachments/files/24618105/debug-GCHR.txt) </p> </details>
gitea-mirror 2026-05-05 10:00:37 -06:00
  • closed this issue
  • added the
    needinfo
    label
Author
Owner

@kmk3 commented on GitHub (Jan 15, 2026):

firejail version 0.9.72

Note that we do not maintain that version of firejail:

Versions other than the latest usually have outdated profiles and may contain
bugs and security vulnerabilities that were fixed in later versions.

See also:

What happens with the latest released version?

<!-- gh-comment-id:3752610895 --> @kmk3 commented on GitHub (Jan 15, 2026): > firejail version 0.9.72 Note that we do not maintain that version of firejail: * <https://github.com/netblue30/firejail/blob/master/SECURITY.md> Versions other than the latest usually have outdated profiles and may contain bugs and security vulnerabilities that were fixed in later versions. See also: * <https://github.com/netblue30/firejail#installing> What happens with the latest released version?
Author
Owner

@michaelvandewalle-commits commented on GitHub (Jan 15, 2026):

I uninstalled version 0.9.72 + profiles.
Installed 0.9.78 but the old profiles came back.
Result = same problem.

Note: also with chromium the problem is the same as google-chrome, because the same profiles are used.
Therefore, the profiles or Google-Chrome and Chromium must be updated.

<!-- gh-comment-id:3753283017 --> @michaelvandewalle-commits commented on GitHub (Jan 15, 2026): I uninstalled version 0.9.72 + profiles. Installed 0.9.78 but the old profiles came back. Result = same problem. Note: also with chromium the problem is the same as google-chrome, because the same profiles are used. Therefore, the profiles or Google-Chrome and Chromium must be updated.
Author
Owner

@rusty-snake commented on GitHub (Jan 15, 2026):

Likely a ibus/fcitx issue.

<!-- gh-comment-id:3754106524 --> @rusty-snake commented on GitHub (Jan 15, 2026): Likely a ibus/fcitx issue.
Author
Owner

@michaelvandewalle-commits commented on GitHub (Jan 15, 2026):

It works not with cinnamon-standard, but IT WORKS under WAYLAND !

<!-- gh-comment-id:3755992445 --> @michaelvandewalle-commits commented on GitHub (Jan 15, 2026): It works not with cinnamon-standard, but IT WORKS under WAYLAND !
Author
Owner

@Lonniebiz commented on GitHub (Jan 29, 2026):

I had the same issue on Debian 12 with Firejail 0.9.72 and multiple Chromium-based browsers (Brave AppImage, Ungoogled Chromium AppImage). The problem is that Chromium tries to connect to IBUS for keyboard input, but the connection fails inside the sandbox.

Workaround: Set GTK_IM_MODULE=xim to bypass IBUS entirely:

GTK_IM_MODULE=xim firejail google-chrome-stable

Or for AppImages:

GTK_IM_MODULE=xim firejail --appimage --profile=/etc/firejail/brave.profile /path/to/Brave.AppImage

This uses X Input Method (built into X11) instead of IBUS, so no daemon connection is needed. It's less heavy-handed than --nodbus since it only affects input method handling.

For a permanent fix, add this to your launcher script or .desktop file.

<!-- gh-comment-id:3820852032 --> @Lonniebiz commented on GitHub (Jan 29, 2026): I had the same issue on Debian 12 with Firejail 0.9.72 and multiple Chromium-based browsers ([Brave AppImage](https://github.com/srevinsaju/Brave-AppImage/releases/tag/stable), [Ungoogled Chromium AppImage](https://ungoogled-software.github.io/ungoogled-chromium-binaries/releases/appimage/64bit/)). The problem is that Chromium tries to connect to IBUS for keyboard input, but the connection fails inside the sandbox. **Workaround:** Set `GTK_IM_MODULE=xim` to bypass IBUS entirely: ``` GTK_IM_MODULE=xim firejail google-chrome-stable ``` Or for AppImages: ``` GTK_IM_MODULE=xim firejail --appimage --profile=/etc/firejail/brave.profile /path/to/Brave.AppImage ``` This uses X Input Method (built into X11) instead of IBUS, so no daemon connection is needed. It's less heavy-handed than `--nodbus` since it only affects input method handling. For a permanent fix, add this to your launcher script or .desktop file.
Author
Owner

@michaelvandewalle-commits commented on GitHub (Jan 30, 2026):

Many thanks!
I made a starter who calls a bashfile with this contents:

#!/bin/bash
GTK_IM_MODULE=xim firejail --blacklist=/media/ /usr/bin/google-chrome-stable %U
<!-- gh-comment-id:3823523366 --> @michaelvandewalle-commits commented on GitHub (Jan 30, 2026): Many thanks! I made a starter who calls a bashfile with this contents: ``` #!/bin/bash GTK_IM_MODULE=xim firejail --blacklist=/media/ /usr/bin/google-chrome-stable %U ```
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#3457
No description provided.